Hackers hiding in plain sight, avatars being used in novel attacks, and even perpetual 2FA-bypass threats against Google users have been reported. What a time to be alive if you are a criminal hacker, although calling this latest scary hacker alive is a stretch: be warned, this malicious AI wants your Gmail credentials. Imagine getting a call from a number with a Google caller ID from an American support technician warning you that someone had compromised your Google account, which had now been temporarily blocked. Imagine that support person then sending an email to your Gmail account to confirm this, as requested by you, and sent from a genuine Google domain. Imagine querying the phone number and asking if you could call them back on it to be sure it was genuine. They agreed after explaining it was listed on google.com and said there might be a wait while on hold. You checked and it was listed, so you didn’t make that call. Imagine being sent a code from Google to be able to reset your account and take back control and almost clicking on it. Luckily, by this stage Zach Latta, founder of Hack Club and the person who nearly fell victim, had sussed it was an AI-driven attack, albeit a very clever one indeed.

Full report : Gmail Security Warning For 2.5 Billion Users — AI Hack Confirmed.